Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
File: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft (raw, json)
Hash identifier: Ms4SQaHrlmXnpsiLt3lMeKxndIBI9QRLUa3gxyk/lq0=
Subject key identifier: 3E:8B:88:0B:A8:18:41:BC:0C:D0:9F:D0:41:2A:CB:D1:95:90:03:B6
Authority key identifier: FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
Certificate issuer: /CN=fc157d396ed992843daeef7b9cca73b043966c08
Certificate serial: 019CE55AEAD31AD85F984AD57C39FD2FD44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
Manifest number: 036B
Signing time: Fri 13 Mar 2026 04:01:06 +0000
Manifest this update: Fri 13 Mar 2026 04:01:06 +0000
Manifest next update: Sat 14 Mar 2026 04:01:06 +0000
Files and hashes: 1: LIEZPbv5mJgzybmqxdXVKVc2eR0.roa (hash: sER4hAOSChMge30hLfJ7QNzWkQjrQzcNYsA2DInAczg=)
2: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl (hash: eYbxQOQbgVyBLRVOT/0iqI682yF3ugzhtNZAi24OYSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:ea:d3:1a:d8:5f:98:4a:d5:7c:39:fd:2f:d4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc157d396ed992843daeef7b9cca73b043966c08
Validity
Not Before: Mar 13 04:01:06 2026 GMT
Not After : Mar 14 04:01:06 2026 GMT
Subject: CN=3e8b880ba81841bc0cd09fd0412acbd1959003b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:39:39:7a:cb:e4:38:2a:ab:52:37:ab:d2:77:
4c:24:e6:16:53:73:c6:77:56:4f:7c:1d:3c:db:fb:
0c:c0:c3:24:30:91:95:46:ef:23:20:2c:a4:e8:c3:
0f:1b:b1:46:b7:f1:02:ac:33:1b:b2:e0:1a:57:2b:
50:07:7b:14:6a:25:cd:f5:34:ef:81:4c:55:48:d1:
bc:a3:b2:42:54:aa:48:44:51:3b:00:72:3e:91:ea:
f3:f6:92:1b:68:04:67:3c:3f:39:32:c8:46:04:80:
a2:d2:33:77:1c:e6:06:f9:e4:74:e8:57:1b:80:4c:
65:79:f0:1e:df:09:b7:24:84:8d:34:91:be:4e:bb:
1f:e4:c2:3f:15:ba:df:2d:59:a9:19:2a:4d:ac:7b:
ef:ca:ea:78:04:a1:e2:57:1a:24:f1:e3:f2:dc:d3:
83:6c:63:74:9e:dc:f3:02:41:43:eb:a0:7d:4f:2b:
bd:da:eb:64:7d:5b:c2:c2:32:28:be:6c:67:fb:fc:
32:d6:8b:f0:17:9a:3c:f3:02:fc:55:76:ff:c6:ba:
b7:47:28:d9:98:5f:3f:7e:70:3f:f3:9d:d6:d3:f8:
22:34:53:f2:29:e2:6a:13:82:6a:35:a6:2e:28:01:
90:f9:68:6e:cf:49:38:8d:5c:09:82:e6:0b:0b:d0:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8B:88:0B:A8:18:41:BC:0C:D0:9F:D0:41:2A:CB:D1:95:90:03:B6
X509v3 Authority Key Identifier:
keyid:FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:91:47:c5:5e:e0:f7:36:ea:cd:7a:f3:32:66:ed:5e:4d:d9:
fb:bf:15:39:53:4c:7d:66:de:5a:49:dd:86:95:a0:ce:1f:a0:
57:ad:fb:ea:c6:6f:0e:3d:ec:13:4f:ea:39:2d:e4:29:f6:23:
91:c6:81:ca:dd:44:55:25:92:80:19:23:43:69:93:4c:0b:f3:
d2:9a:a9:1f:c3:26:88:ce:fd:d0:1d:59:87:bd:24:31:f2:e6:
a6:88:83:a7:7f:b4:57:b8:51:23:25:e6:05:68:46:c7:e0:c8:
66:58:bb:60:3f:4c:77:96:cb:a0:26:cc:59:18:e2:4b:27:a0:
c5:cc:ea:1c:73:55:70:84:bb:48:6f:43:7b:82:30:99:20:42:
0f:bd:84:5b:1d:29:db:9b:25:6a:9b:4c:e5:11:77:cb:49:51:
67:83:5a:49:80:07:4e:0f:61:09:c3:70:28:ff:31:6d:22:74:
79:26:17:7a:8d:ce:8d:a5:f5:a5:1d:31:85:94:9c:ac:2c:e6:
ab:2a:df:d8:c9:21:ff:cc:70:84:42:b4:d1:a8:12:be:48:a1:
39:90:d5:3b:01:e8:e2:08:39:59:84:35:6a:51:9b:c0:e8:47:
69:79:ed:62:5a:8c:57:c1:a2:7a:05:64:1e:20:38:1d:3e:98:
0c:0e:24:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:24:35 2026 by rpki-client